Summary: ph333y respects your privacy. We collect personal data only to operate our platform, comply with Philippine law, and keep your account secure. We do not sell your data to third parties. You have meaningful rights over your information under the Philippine Data Privacy Act of 2012.
1 Introduction
This Privacy Policy ("Policy") describes how ph333y ("ph333y," "we," "us," "our") collects, uses, stores, and discloses personal data in connection with the ph333y online gaming platform accessible at ph333y.app (the "Platform").
ph333y is committed to handling your personal data responsibly and in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines.
By registering an account on ph333y or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
2 Data Controller
ph333y is the data controller responsible for the personal data collected through the Platform. As data controller, ph333y determines the purposes and means of processing your personal data.
ph333y has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.
3 Data We Collect
ph333y collects the following categories of personal data:
- Registration Data: Full name, date of birth, email address, mobile number, and residential address provided when you create a ph333y account.
- Identity Verification (KYC) Data: Copies of government-issued identification documents (e.g., Philippine passport, driver's license, UMID, SSS ID), selfie photographs, and proof of address documents submitted during the KYC process.
- Financial Data: Payment method details (e.g., GCash mobile number, BPI/BDO/Metrobank account reference), deposit and withdrawal transaction records, and account balance history. ph333y does not store full bank account numbers or card numbers.
- Gaming Activity Data: Records of all wagers placed, games played, session durations, win/loss history, and bonus usage on the Platform.
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers collected automatically when you access the Platform.
- Communications Data: Records of your communications with ph333y support, including live chat transcripts, emails, and any feedback or complaints submitted.
- Responsible Gaming Data: Records of any deposit limits, cooling-off periods, or self-exclusion requests you have made, maintained to ensure compliance with your stated preferences.
4 How We Collect Data
ph333y collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
- Automatically: Through cookies, web beacons, server logs, and similar technologies when you access and use the Platform. See Section 9 for details on cookies.
- From third parties: From identity verification service providers during KYC, from payment processors in connection with transaction processing, and from fraud prevention services.
5 Legal Basis for Processing
ph333y processes your personal data on the following legal bases under the Data Privacy Act of 2012:
- Contractual necessity: Processing required to perform our obligations under the ph333y Terms & Conditions, including account management, payment processing, and game provision.
- Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering obligations, PAGCOR regulatory requirements, and NPC directives.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and service improvement, where such interests are not overridden by your rights.
- Consent: Processing for marketing communications and optional analytics, where
you have provided explicit consent. You may withdraw consent at any time by contacting our DPO or updating your communication preferences in your account settings.
6 How We Use Your Data
ph333y uses your personal data for the following purposes:
- Account management: Creating and maintaining your ph333y account, verifying your identity, and managing your login credentials.
- Service delivery: Processing deposits and withdrawals, providing access to games, crediting bonuses, and delivering customer support.
- Regulatory compliance: Fulfilling KYC and anti-money laundering obligations, reporting to PAGCOR and other relevant Philippine authorities as required by law, and maintaining records as mandated by applicable regulations.
- Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct as defined in the ph333y Terms & Conditions.
- Responsible gaming: Monitoring gaming activity to identify potential problem gambling indicators, enforcing deposit limits and self-exclusion requests, and providing responsible gaming interventions where appropriate.
- Platform improvement: Analyzing aggregated usage data to improve the Platform's performance, user experience, and game offering.
- Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
No Automated Decision-Making: ph333y does not make decisions that produce significant legal effects on you solely through automated processing without human review. Where automated tools are used to flag accounts for review (e.g., fraud detection), a member of the ph333y compliance team will conduct a manual assessment before any account action is taken.
7 Sharing Your Data
ph333y does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following circumstances:
- Service providers: We share data with carefully selected third-party service providers who assist us in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, game software providers, and cloud infrastructure providers. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to ph333y.
- Regulatory and law enforcement authorities: We disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities where required by law, court order, or regulatory directive.
- Fraud prevention networks: We may share data with industry fraud prevention services to protect ph333y and its players from fraudulent activity. Such sharing is conducted under appropriate data sharing agreements.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ph333y's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
Cross-Border Transfers: Some of ph333y's service providers may process data outside the Philippines. Where such transfers occur, ph333y ensures that appropriate safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.
8 Data Retention
ph333y retains your personal data for as long as necessary to fulfill the purposes described in this Policy, and in any case for the minimum periods required by applicable Philippine law. The following general retention periods apply:
- Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
- Gaming activity data: Retained for a minimum of three (3) years from the date of each gaming session.
- Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution.
- Self-exclusion records: Retained indefinitely to prevent circumvention of self-exclusion by re-registration.
Upon expiry of the applicable retention period, ph333y will securely delete or anonymize your personal data in accordance with its data disposal procedures.
9 Cookies & Tracking Technologies
ph333y uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences across sessions.
ph333y uses the following categories of cookies:
- Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting Platform functionality.
- Functional cookies: Remember your preferences such as language settings and display options to improve your experience on the Platform.
- Analytics cookies: Collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. These are only set with your consent.
You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. ph333y does not use third-party advertising or behavioral tracking cookies.
10 Security Measures
ph333y implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:
- Encryption in transit: All data transmitted between your device and the ph333y Platform is encrypted using TLS (Transport Layer Security) protocols.
- Encryption at rest: Sensitive personal data stored on ph333y's systems is encrypted using AES-256 encryption.
- Access controls: Access to personal data is restricted to ph333y personnel and service providers who require it to perform their duties, on a strict need-to-know basis.
- Security monitoring: ph333y's systems are monitored continuously for suspicious activity, unauthorized access attempts, and potential security incidents.
- Incident response: ph333y maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights, ph333y will notify the National Privacy Commission and affected players in accordance with NPC Circular 16-03 and applicable breach notification requirements.
Your Role in Security: While ph333y takes extensive measures to protect your data, you also play an important role. Keep your ph333y login credentials confidential, use a strong and unique password, and contact ph333y support immediately if you suspect unauthorized access to your account.
11 Your Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph333y:
- Right to be informed: The right to be informed of how your personal data is being collected and processed, as described in this Policy.
- Right of access: The right to request a copy of the personal data ph333y holds about you, along with information about how it is being processed.
- Right to rectification: The right to request correction of any inaccurate or incomplete personal data ph333y holds about you.
- Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph333y's legal retention obligations.
- Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
- Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
- Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.
To exercise any of these rights, please contact ph333y's Data Protection Officer using the details in Section 14. ph333y will respond to all verified data subject requests within fifteen (15) business days of receipt.
12 Children's Privacy
The ph333y Platform is strictly intended for individuals who are at least 21 years of age. ph333y does not knowingly collect personal data from individuals under the age of 21. If ph333y becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the originating payment method.
If you believe that a minor has registered an account on ph333y, please contact our support team immediately at [email protected] so that we can take prompt action.
13 Changes to This Policy
ph333y may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever a new version is published.
Where changes are material, ph333y will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.
We encourage you to review this Policy periodically to stay informed about how ph333y protects your personal data.
14 Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact ph333y's Data Protection Officer:
If you are not satisfied with ph333y's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.